Privacy Policy

1. Who We Are

Thiwa Sombat is a financial education practice registered and operating in Bangkok, Thailand. Our principal place of business is 46 Ari Soi 1, Phaya Thai, Bangkok 10400. For data-related enquiries, contact us at [email protected].

2. Data We Collect

When you contact us, register for a program, or use our website, we may collect the following personal data:

• Full name
• Email address
• Phone number (if provided)
• Program enquiry details and communication history
• Website usage data via cookies (see our Cookie Policy)

We do not collect sensitive personal data (such as health information) unless you choose to share it voluntarily in the context of the Chronic Illness Financial Adaptation program. Such information is treated with the highest degree of discretion.

3. Legal Basis for Processing

We process personal data on the following legal bases under the Thailand Personal Data Protection Act B.E. 2562 (PDPA):

• Consent — for marketing communications and cookies (where applicable)
• Contractual necessity — for delivering a program you have registered for
• Legitimate interest — for managing enquiries and improving our programs
• Legal obligation — for financial record-keeping required by Thai law

4. How We Use Your Data

• To respond to enquiries and provide information about programs
• To process program registrations and manage attendance
• To send program-related communications (session reminders, notes)
• To issue receipts and maintain financial records
• To improve our programs through anonymised feedback analysis

We do not use personal data for automated decision-making. We do not sell personal data to any third party.

5. Data Sharing

We share personal data only in the following limited circumstances:

• With service providers who support our operations (e.g., email platform), subject to appropriate data processing agreements
• With Thai government authorities when required by law
• With your explicit consent for any other purpose

6. Data Retention

We retain personal data for as long as is necessary for the purposes outlined in this policy, and in accordance with Thai legal requirements. Enquiry records are typically retained for 12 months. Financial records related to program payments are retained for 5 years as required by Thai Revenue Department regulations. You may request deletion of your data at any time (subject to legal retention obligations).

7. Data Security

We take reasonable and appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, or destruction. These measures include encrypted email, access controls, and restricted physical access to records. In the event of a data breach that is likely to affect your rights and freedoms, we will notify you and the Office of the Personal Data Protection Committee (PDPC) within the timeframes required by law.

8. Cookies

Our website uses cookies. Please see our Cookie Policy for a full explanation of the cookies we use, their purpose, and how to manage your preferences.

9. Your Rights Under the PDPA

Under the Thailand Personal Data Protection Act, you have the following rights in relation to your personal data:

• Right to access — to request a copy of the data we hold about you
• Right to rectification — to request correction of inaccurate data
• Right to erasure — to request deletion of your data (subject to legal obligations)
• Right to restriction — to request that we limit how we process your data
• Right to portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interest
• Right to withdraw consent — at any time, where processing is based on consent

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Personal Data Protection Committee (PDPC), the supervisory authority for data protection in Thailand.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

11. Children's Privacy

Our programs are designed for adults aged 40 and above. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that we have inadvertently collected such data, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. When we do, we will update the "Last Updated" date at the top of this page. For significant changes, we will notify existing contacts by email where we have their address.

13. Contact

For any question relating to this Privacy Policy or your personal data, please contact:

Thiwa Sombat
46 Ari Soi 1, Phaya Thai, Bangkok 10400
[email protected]
+66 2 617 4298